CVE-2025-55295
- Source
- https://cve.org/CVERecord?id=CVE-2025-55295
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-55295.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-55295
- Aliases
-
- GHSA-vh56-26wq-vvfv
- Published
- 2025-08-19T17:46:58Z
- Modified
- 2026-10-21T02:54:06Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- qBit Manage Path Traversal Vulnerability
- Details
-
qBit Manage is a tool that helps manage tedious tasks in qBittorrent and automate them. A path traversal vulnerability exists in qbit_manage's web API that allows authenticated users to read arbitrary files from the server filesystem through the restore_config_from_backup endpoint. The vulnerability allows attackers to bypass directory restrictions and read arbitrary files from the server filesystem by manipulating the backup_id parameter with path traversal sequences (e.g., ../). This vulnerability is fixed in 4.5.4.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-22" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/55xxx/CVE-2025-55295.json" }- References
Affected packages
Git / github.com/stuffanthings/qbit_manage
Affected ranges
- Type
- GIT
- Repo
- https://github.com/stuffanthings/qbit_manage
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "4.5.0" }, { "fixed": "4.5.4" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" }, { "original_tag": "v4.5.4", "range": [ { "fixed": "1e12a1610fe05a2848ea1fa5bd987292c62d85cd" } ], "source": "REFERENCES_TAG" }, { "range": [ { "introduced": "0" }, { "fixed": "4.5.4" } ], "source": "DESCRIPTION" } ] }